Explicitly check server name in client TLS configuration

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>
mindersec · Nov 29, 2024 · 6bb1373 · 6bb1373
1 parent 258f3e2
commit 6bb1373
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/internal/util/helpers.go b/internal/util/helpers.go
@@ -117,7 +117,10 @@ func GetGrpcConnection(
 		}
 	}
 
-	credentialOpts := credentials.NewTLS(&tls.Config{MinVersion: tls.VersionTLS13})
+	credentialOpts := credentials.NewTLS(&tls.Config{
+		MinVersion: tls.VersionTLS13,
+		ServerName: grpc_host,
+	})
 	if allowInsecure {
 		credentialOpts = insecure.NewCredentials()
 	}